[c-nsp] Firewall NAT and DDOS

[Samir Abid Al-mahdi]

Any help please ?

Best Regards

On 11 November 2016 at 11:44, Samir Abid Al-mahdi via cisco-nsp <
cisco-nsp at puck.nether.net> wrote:

> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> ---------- Forwarded message ----------
> From: Samir Abid Al-mahdi <samir.abidali at gorannet.net>
> To: "cisco-nsp at pu ck.nether. net" <cisco-nsp at puck.nether.net>
> Cc:
> Date: Fri, 11 Nov 2016 11:43:46 +0300
> Subject: Firewall NAT and DDOS
> ​​
> Dear Experts,
>
> I have an issue in my current network setup in which we are getting
> multiple volumetric attacks.
>
> The current firewall is dropping the traffic however our links is already
> congested.
>
> If we manually trigger black hole the attack stops however the ip address
> which is used by a nat pool, stops working and many customers complain
> mainly due to the uncoordinated actions between the router and firewall.
>
> Do you know of any firewall that can trigger the black hole and remove the
> attacked IP from the natted pool at the same time.
>
> or perhaps any other suggestions for this issue.
>
> Thank you
>
>